CVE-2002-0367CISA KEV
Microsoft Windows Privilege Escalation Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
- Product
- Windows
- Added to KEV
- 3 Mar 2022
- Federal remediation due
- 24 Mar 2022
- Known ransomware use
- Not reported